CVE-2024-50170

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Nov 7, 2024
Updated: Nov 13, 2024
CWE ID 401

Summary

CVE-2024-50170 is a vulnerability affecting the Linux kernel. In the net: bcmasp driver, a memory leak issue has been identified and addressed. Specifically, in the bcmasp_xmit() function, the skb memory is not freed when mapping fails during transmission. This oversight can lead to memory leaks, potentially resulting in system instability or other unintended consequences. To rectify this issue, the developers have added a call to dev_kfree_skb() to properly release the memory in such cases.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share